Malicious PDF — malware analysis report

Static analysis result for SHA-256 cbb8fd61c9047c3d…

MALICIOUS

PDF

21.5 KB Created: 2019-05-01 18:52:04 +01:00 Authoring application: mPDF 5.7
MD5: fb818139b57b1da0001c9255c642886e SHA-1: 6e5a7c8d8d38f32561719f65d261b7b54466360d SHA-256: cbb8fd61c9047c3d8fb5288325cd6f2fe57663ce2df34233ca07339e88bbb500
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, suggesting a link farm or distribution mechanism. The ML classifier also flagged this PDF as malicious with high confidence. While no scripts were extracted, the sheer volume of links points to a malicious intent, likely to redirect users to malicious sites or download further payloads.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6091091092093099/GABRIELLE-CHASSEUSE-DE-L-OMBRE-L-OMBRE-ET-LA-LUMIERE-TOME-2-by-Caroline-Cadix.pdf
    • http://loaminoo.linkpc.net/6091091092097096/GABRIELLE-CHASSEUSE-DE-L-OMBRE-LA-ROSE-ET-LA-DAGUE-TOME-1-by-Caroline-Cadix.pdf
    • http://loaminoo.linkpc.net/6091091092093095/GABRIELLE-CHASSEUSE-DE-L-OMBRE-L-HOMME-ET-LA-B-TE-TOME-3-by-Caroline-Cadix.pdf
    • http://loaminoo.linkpc.net/7091095098090092/D-ombre-et-de-Lumi-re-1---La-tueuse-de-l-ombre-by-Celine-Musmeaux.pdf
    • http://loaminoo.linkpc.net/5096096090091096/D-ombre-et-de-lumi-re-by-Aurore-Doignies.pdf
    • http://loaminoo.linkpc.net/5094091097096098/La-Ville-L-Ombre-La-Lumiere-Chronique-by-Daniel-Bizien.pdf
    • http://loaminoo.linkpc.net/7094091096098093/La-sentinelle-de-l-ombre-by-Robert-Crais.pdf
    • http://loaminoo.linkpc.net/6090099091096098/L-Ombre-De-MA-Voix-by-Patricia-Kaas.pdf
    • http://loaminoo.linkpc.net/7090091091093090/Dans-son-Ombre-Les-jumeaux-t-1-by-Manon-Manhon-Tutin.pdf
    • http://loaminoo.linkpc.net/6095099090096093/L-Ombre-de-Palerme-Roman-policier-by-Ren-Swennen.pdf
    • http://loaminoo.linkpc.net/7094094092096093/L-amour-maudit-T11---Les-seigneurs-de-l-ombre-by-Gena-Showalter.pdf
    • http://loaminoo.linkpc.net/7092091097098099/Le-Huiti-me-Proph-te-Celui-qui-attend-dans-l-ombre-by-Nicolas-Blanchot.pdf
    • http://loaminoo.linkpc.net/6090095098096092/The-Summoning-Il-richiamo-delle-ombre-Darkest-Powers-1-by-Kelley-Armstrong.pdf
    • http://loaminoo.linkpc.net/7097096092091098/Du-c-t-de-chez-Swann-suivi-de-l-ombre-des-jeunes-filles-en-fleurs-dition-int-grale-by-Marcel-Proust.pdf
    • http://loaminoo.linkpc.net/6091091092091096/Chasseuse-Rouge-tome-2-by-Lady-Pink.pdf
    • http://loaminoo.linkpc.net/6091091092093093/Chasseuse-de-cristaux-Vestiges-de-neige---Tome-1-by-Derussy-Julie.pdf
    • http://loaminoo.linkpc.net/7093094097099097/Le-Temps-du-Pouvoir-La-Lumi-re-de-l-Empire-Tome-1-by-Terah-Edun.pdf
    • http://loaminoo.linkpc.net/5096097093090099/Pr-sence-Corporelle-de-l-Homme-En-Plusieurs-Lieux-Prouv-e-Possible-Par-Les-Principes-de-la-Bonne-Philosophie-Lettres-O-Relevante-Le-D-fi-d-Un-Journaliste-Hollandois-on-Dissipe-Toute-Ombre-de-Contradiction-Entre-Les-Merveilles-Du-Dome-Catholique-by-Joseph-Adrien-Le-Large-De-Lignac.pdf
    • http://loaminoo.linkpc.net/6099096098095092/Trash-cancan-Tome-3-Les-grands-m-chants-by-Caroline-Guillot.pdf
    • http://loaminoo.linkpc.net/6098092091091097/Point-de-rupture-Tome-1---Trilogie-Dualit-s-meurtri-res-by-Caroline-Plouffe.pdf
    • http://loaminoo.linkpc.net/5096096090091096/D-ombre-et-de-lumi-re-by-Aurore-Doignies

Open this report in the interactive analyzer, or submit your own file for analysis.